Route Origin Authorization
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142360.roa
File: AS142360.roa (raw, json)
Hash identifier: MuHhRfKL9tZ0E76BaoKQVmO6Li3tqksG3k72fTzJJwI=
Subject key identifier: 13:C0:CE:51:C5:30:B1:51:D8:94:8F:B1:14:9B:E4:A7:AB:CA:A7:A6
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0FB02351FBFCBD8912E4994F07075B9CF3E52B95
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142360.roa
Signing time: Sat 02 May 2026 16:44:25 +0000
ROA not before: Sat 02 May 2026 16:39:25 +0000
ROA not after: Sat 01 May 2027 16:44:25 +0000
asID: 142360
IP address blocks: 43.240.227.0/24 maxlen: 24
103.85.54.0/23 maxlen: 24
103.147.156.0/23 maxlen: 24
103.170.24.0/23 maxlen: 24
103.248.216.0/24 maxlen: 24
2401:2620::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b0:23:51:fb:fc:bd:89:12:e4:99:4f:07:07:5b:9c:f3:e5:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 16:39:25 2026 GMT
Not After : May 1 16:44:25 2027 GMT
Subject: CN=13C0CE51C530B151D8948FB1149BE4A7ABCAA7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:97:b0:16:37:b6:38:3d:0f:1d:16:ff:46:
91:ed:1b:52:46:8b:5a:a8:59:cd:11:3a:38:d6:50:
0b:99:d4:83:95:97:4e:3b:ed:a6:87:db:33:0e:9c:
c0:a8:c8:74:19:c6:25:cd:29:00:ba:91:be:71:43:
29:4f:12:8d:5f:b4:6a:ef:5b:d4:60:b0:c0:d9:7d:
35:13:b2:2e:18:3d:41:c2:a5:bd:54:e1:61:4c:e4:
91:6c:77:fc:eb:ba:75:b1:57:f6:c2:ba:9f:3e:cc:
31:c6:0e:16:e5:21:3f:68:6b:61:76:72:a2:80:0a:
02:ee:05:2e:b9:3a:06:a9:a5:4a:6a:98:0e:cf:61:
16:94:7a:20:21:7b:90:68:ec:3f:97:f5:4c:1b:3e:
9b:4f:73:ff:a1:04:2d:70:2c:0e:a4:94:f2:e5:26:
af:3e:56:06:be:fd:c0:be:b5:b2:a9:24:59:56:d4:
03:94:9e:b0:4c:04:3b:ea:e9:d2:69:7d:49:0d:79:
bf:6e:34:cd:93:5d:a7:f5:fc:6a:07:9b:65:f1:d9:
05:4c:e1:2d:3e:f5:22:e6:61:fe:69:bf:48:1d:c3:
aa:22:71:1c:47:b3:98:7a:33:29:da:1a:26:8c:13:
7d:b1:36:1a:26:29:ba:14:56:08:f3:82:d0:4d:44:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C0:CE:51:C5:30:B1:51:D8:94:8F:B1:14:9B:E4:A7:AB:CA:A7:A6
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.227.0/24
103.85.54.0/23
103.147.156.0/23
103.170.24.0/23
103.248.216.0/24
IPv6:
2401:2620::/32
Signature Algorithm: sha256WithRSAEncryption
0d:64:a9:bf:1d:0a:19:46:77:2f:ab:a6:98:29:73:93:ca:98:
5a:6e:b9:dd:f2:36:57:74:5e:cb:1d:64:c7:fc:b1:68:04:a9:
1b:7a:64:be:71:6b:29:32:49:f4:aa:1d:bb:ed:ee:05:0d:1f:
e1:6e:83:ca:25:10:04:8c:b4:b1:d8:2c:30:a1:a4:bf:e4:7c:
f6:b0:97:e8:ca:d2:06:b8:75:25:b3:dd:ac:df:d5:7b:b5:94:
96:76:f0:f9:71:e1:c7:e8:5f:2f:c4:b2:cd:84:1d:cf:10:a4:
74:f1:37:2e:49:9f:8f:13:1f:46:32:dd:88:6a:ba:8e:dd:42:
eb:ad:04:8b:b2:5c:34:96:fe:06:37:9b:7b:9a:0c:91:b9:c5:
21:04:cf:ab:f4:a1:9d:6f:eb:30:9b:0d:1b:a4:10:fe:9b:6b:
e3:2d:88:d4:8b:02:ea:1a:71:70:23:b3:66:cd:c0:72:ee:b6:
a0:b4:75:f6:8d:4b:e1:7d:96:0d:21:8f:58:0b:d2:c6:5d:f7:
34:41:f2:50:90:55:d2:e4:70:0f:dd:95:81:97:3f:46:af:5c:
a7:b6:17:07:33:28:bc:45:dc:cd:40:ae:8e:c3:91:cc:b7:69:
99:c5:08:cf:bf:cb:2f:db:07:7a:39:3b:84:36:43:cc:c3:d3:
e1:b3:86:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUD7AjUfv8vYkS5JlPBwdbnPPlK5UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE2MzkyNVoX
DTI3MDUwMTE2NDQyNVowMzExMC8GA1UEAxMoMTNDMENFNTFDNTMwQjE1MUQ4OTQ4
RkIxMTQ5QkU0QTdBQkNBQTdBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMcWl7AWN7Y4PQ8dFv9Gke0bUkaLWqhZzRE6ONZQC5nUg5WXTjvtpofbMw6c
wKjIdBnGJc0pALqRvnFDKU8SjV+0au9b1GCwwNl9NROyLhg9QcKlvVThYUzkkWx3
/Ou6dbFX9sK6nz7MMcYOFuUhP2hrYXZyooAKAu4FLrk6BqmlSmqYDs9hFpR6ICF7
kGjsP5f1TBs+m09z/6EELXAsDqSU8uUmrz5WBr79wL61sqkkWVbUA5SesEwEO+rp
0ml9SQ15v240zZNdp/X8agebZfHZBUzhLT71IuZh/mm/SB3DqiJxHEezmHozKdoa
JowTfbE2GiYpuhRWCPOC0E1Edv0CAwEAAaOCAfMwggHvMB0GA1UdDgQWBBQTwM5R
xTCxUdiUj7EUm+Snq8qnpjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzYwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIA
ATAeAwQAK/DjAwQBZ1U2AwQBZ5OcAwQBZ6oYAwQAZ/jYMA0EAgACMAcDBQAkASYg
MA0GCSqGSIb3DQEBCwUAA4IBAQANZKm/HQoZRncvq6aYKXOTyphabrnd8jZXdF7L
HWTH/LFoBKkbemS+cWspMkn0qh277e4FDR/hboPKJRAEjLSx2CwwoaS/5Hz2sJfo
ytIGuHUls92s39V7tZSWdvD5ceHH6F8vxLLNhB3PEKR08TcuSZ+PEx9GMt2IarqO
3ULrrQSLslw0lv4GN5t7mgyRucUhBM+r9KGdb+swmw0bpBD+m2vjLYjUiwLqGnFw
I7NmzcBy7ragtHX2jUvhfZYNIY9YC9LGXfc0QfJQkFXS5HAP3ZWBlz9Gr1ynthcH
Myi8RdzNQK6Ow5HMt2mZxQjPv8sv2wd6OTuENkPMw9Phs4Yz
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:26 2026 by rpki-client